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(54) Token generation process in an open metering system 



(57) A method of issuing digital tokens in a open 
system meter comprising the steps of: 

sending a request for digital tokens and predeter- 
mined postal information, including addressee 
information, from a host processor to a vault that is 
operative!/ coupled to the host processor; 
calculating in the vault in response to the request 
for tokens at least one digital token using the prede- 
termined postal information; 



debiting postal funds in the vault; 

Issuing the digital token to the host processor; and 
storing the digital token and the predetermined 
postal information as a transaction record in the 
host processor for subsequent generation and 
printing of an indicia. 







FIG. 3 










DLL 








reOUEST INDICIA 


REQUEST TOKEN 












REQUEST TOKEN 








GENERATE 


VAULT 


APPLICATIW 


POSTAL DATA 


INDICIA 
BITHAP 

— iSiciT^ 

GRAPHICS 




PROGRAH 


ItOICIA EIT HAP 


TOKEN 


GENERATE 
TOKEN 






INDICIA BIT 
KAP STORAGE 













20 



Printed Rank Xerox (UK) Busiisss Services 



1 



EP0 780 804A2 



2 



Description 

The present invention relates to advanced postage 
payment systems and, more particularly, to advanced 
postage payment systems having pre-computed post- 
age payment information. 

The present application is related to the following 
U.S. Patent Applications Serial Nos. [Attorney Dockets 
E-415, E-417. E-418, E-419. E-420. E-421, E-444. E- 
452, E-463 and E-466]. each filed concurrently here- 
with, and assigned to the assignee of the present inven- 
tion. 

The USPS Is presently considering requirements 
for two metering device types: closed systems and open 
systems, in a closed system, the system functionality is 
solely dedicated to metering activity. Examples of 
closed system metering devices, also referred to as 
postage evidencing devices (PEDs). include conven- 
tional digital and analog postage meters wherein a ded- 
icated printer is securely coupled to a metering or 
accounting function. In a closed system, since the 
printer is securely coupled and dedicated to the meter, 
printing cannot take place without accounting. Further- 
m,ore. printing occurs immediately after accounting is 
concluded. 

In an open system, the printer is not dedicated to 
the metering activity, freeing system functionality for 
multiple and diverse uses in addition to the metering 
activity. Examples of open system metering devices 
include personal computer (PC) based devices with sin- 
gle/multi-tasking operating systems, multi-user applica- 
tions and digital printers. An open system metering 
device is a PED with a non-dedicated printer that is not 
securely coupled to a secure accounting module. 

When a PED prints a postage indicia on a mail- 
piece, the accounting register within the PED must 
always reflect that the printing has occurred. Postal 
authorities generally require the accounting information 
to be stored within the postage meter in a secure man- 
ner with security features that prevent unauthorized and 
unaccounted for postage printing or changes In the 
amounts of postal funds stored In the meter. In a closed 
system, the meter and printer are integral units, i.e.. 
interlocked in such a manner as to ensure that the print- 
ing of a postage indicia cannot occur without account- 
ing. 

Since an open system PED utilizes a printer that is 
not used exclusively for printing proof of postage pay- 
ment, additional security measures are required to pre- 
vent unauthorized printing evidence or postage 
payment. Such security measures include crypto- 
graphic evidencing of postage payment by PEDs in the 
open and closed metering systems. The postage value 
for a mail piece may be encrypted together with other 
data to generate a digital token. A digital token is 
encrypted information that authenticates the informa- 
tion imprinted on a mail piece including postage values. 

Exanples of systems for generating and using dig- 
ital tokens are described in U.S. Patents Nos. 



4.757.537. 4,831.555. 4.775,246. 4.873,645, and 
4,725.718, the entire disclosures of which are hereby 
incorporated by reference. These systems employ an 
encryption algorithm to encrypt selected information to 

5 generate at least one digital token for each mailptece. 
The encryption of the information provides security to 
prevent altering of the printed information in a manner 
such that any misuse of the tokens is detectable by 
appropriate verification procedures. 

70 Typical information which may be encrypted as part 
of a digital token includes origination postal code, ven- 
dor identification, data identifying the PED, piece count, 
postage amount, date. and. for an open system, desti- 
nation postal code. These items of information, collec- 

15 tively referred to as Postal Data, when encrypted with a 
secret key and printed on a mail piece provide a very 
high level of security which enables the detection of any 
attenpted modification of a costal revenue block or a 
destination postal code. A postal revenue block is an 

20 image printed on a mcii piece that includes the digital 
token used to piovide evidanoe of postage payment. 
The Postal D'ita may be printed both in encrypted and 
unencrypted torm ir the postal revenue block. Postal 
Data serves as an input to a Digital Token Transforma- 

25 tion which is a cryptographic transformation computa- 
tion that utilizes a secret key to produce digit tokens. 
Results of the Digital Token Transformation, i.e.. digital 
tokens, are available only after completion of the 
Accounting Process. 

30 Digital tokens are utilized in both open and closed 
metering systems. However, for open metering sys- 
tems, the non-dedicated printer may be used to print 
other information in addition to the postal revenue block 
and may be used in activity other than postage evidenc- 

35 ing. In an open system PED, addressee information is 
included in the Postal Data which is used in the genera- 
tion of the digital tokens. Such use of the addressee 
information creates a secure link t>etween the mailpiece 
and the postal revenue block and allows unambiguous 

40 authentication of the mail piece. 

Preferably, two Digital Tokens are used to authenti- 
cate Postal Data and postage payment. The first is pro- 
duced by a Digital Token Transformation using a secret 
key held by the Postal Service and the mailer's PED. 

45 The second is produced by a Digital Token Transforma- 
tion using a secret key held by the PED vendor and the 
mailer's PED. The fact that two independent entities 
hold separate verification secrets greatly enhances the 
security of the system because it provides the Postal 

so Service and the vendor with independent means to 
authenticate the postal revenue block, and thus, verify 
postage payment. The use of the second Digital Token 
Transformation using the vendor's seaet key is an 
optional part of the security which authenticates post- 
55 age payment by a particular vendor's device. The use of 
two digital tokens (postal and vendor) is described in 
U.S. Patent No. 5,390.251 and pending European Pat- 
ent Application Serial No. 95107216.4. filed f^ay 12, 
1995. both assigned to the assignee of the present 
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invention, the entire disclosures of whicti are hereby 
incorporated by reference. 

As previously described, an inherent difference 
between closed metering systems and open metering 
systems is the printer. The printer in a closed metering s 
system is a secure device that is dedicated for printing 
evidence of postage. Thus, the printing function in a 
closed metering system Is dependent on the metering 
function. This contrasts an open metering system 
printer, which is a non^secure. non-dedicated printer io 
that prints typical PC related documents in addition to 
printing evidence of postage. Thus, the printing function 
in an open metering system is independent of the 
metering function. The present invention provides a 
process in an open metering system for requesting, cal- is 
culating. storing and issuing one or more digital tokens 
that can be used at a later time in the generation of one 
or more indicia images. 

In accordance with the present invention some of 
the functionality typically performed in the vault of a con- so 
ventional postage meter has been removed from the 
vault of a PC-based open metering system and is per- 
formed in the PC. It has been discovered that this trans- 
fer of functionality from the vault to the PC does not 
effect the security of the meter because the information ss 
being processed includes addressee information. It has 
also been discovered that in a PC-based open metering 
system tokens can be issued and then stored for gener- 
ating and printing an indicia at a later time. It has further 
been discovered that a token can be reissued if the 3o 
token is never printed or if a problem occurs preventing 
a printing of an indicia with the token. 

The present invention provides a token generation 
process for an open metering system, such as a PC- 
based metering system that comprises a PC, special 35 
Windows-based software, a printer and a plug -in 
peripheral as a vault to store postage funds. The PC 
meter uses a personal conrputer and its non-secure and 
non-dedicated printer to generate digital tokens and 
later print evidence of postage an envelopes and labels 4o 
at the same time it prints a recipient address. 

The present invention provides a token generation 
process for an open metering system that includes 
security that prevents tampering and false evidence of 
postage payment. The present invention further pro- 45 
vides a token generation process that includes the abil- 
ity to do batch processing of digital tokens. 

In accordance with the present invention a method 
of issuing digital tokens in a open system meter 
includes the steps of sending a request for digtal tokens so 
and predetermined postal information, including 
addressee information, from a host processor to a vault 
that is operatively coupled to the host processor; calcu- 
lating in the vault in response to the request for tokens 
at least one digital token using the predetermined postal ss 
information; debiting postal funds in the vault; issuing 
the digital token to the host processor; and storing the 
digital token and the predetermined postal information 
as a transaction record in the host processor for subse- 



quent generation and printing of an indicia. The method 
further includes the steps of generating in the host proc- 
essor an indicia comprising a graphical image of the 
digital token and the predetermined postal information 
and storing the indicia in the host processor; and print- 
ing the indicia on a mallpiece when requested. 

The above and other objects and advances of the 
present invention will be apparent upon consideration of 
the following detailed description, taken in conjunction 
with accompanying drawings, in which like reference 
characters refer to like parts throughout, and in which: 

Rg. 1 is a block diagram of a PC-based metering 
system in which the present invention operates: 
Rg. 2 is a schematic block diagram of the PC- 
based metering system of Rg. 1 including a remov- 
able vault card and a DLL in the PC; 
Rg. 3 is a schematic block diagram of the DLL in 
the PC-based metering system of Fig. 1 including 
interaction with the vault to issue ard store digital 
tokens; 

Rg. 5 is a flow chart of a digital token generation 
process of the present invention; 
Fig. 4 is a block diagram of the DLL sub-modules in 
the PC-based metering system of Fig. 1 ; 
Fig. 6 is a flow chart of the PC storing a transaction 
record including an issued digital token in the PC- 
based metering system of Fig. 1 ; 
Fig. 7 is a flow chart of the PC generating an indicia 
image for a digital token in the PC-based metering 
system of Fig. 1;and 

Fig. 8 is an representation of indicia generated and 
printed by the PC-based metering system of Fig. 1 . 

In describing the present invention, reference is 
made to the drawings, wherein there is seen in Figs. 1- 
4 an open system PC-i>ased postage meter, also 
referred to herein as a PC meter system, generally 
referred to as 10, in which the present invention per- 
forms the digital token process. PC meter system 10 
includes a conventional personal computer configured 
to operate as a host to a removable metering device or 
electronic vault, generally referred to as 20, in which 
postage funds are stored. PC meter system 10 uses the 
personal computer and its printer to print postage on 
envelopes at the same time it prints a recipient's 
address or to print labels for pre-addressed return enve- 
lopes or large mailpieces. It will be understood that 
although the preferred embodiment or the present 
invention is described with regard to a postage metering 
system, the present invention is applicable to any value 
metering system that includes a transaction evidencing. 

As used herein, the term personal computer is used 
genetically and refers to present and future micro- 
processing systems with at least one processor opera- 
tively coupled to user interface means, such as a 
display and keyboard, and storage media The personal 
computer may be a workstation that Is accessible by 
more than one user. 
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The PC-based postage meter 10 includes a per- 
sonal computer (PC) 12. a display 14. a keyboard 16. 
and an non-secured digital printer 18. preferably a laser 
or ink-jet printer. PC 12 includes a conventional proces- 
sor 22, such as the 80486 and Pentum processors 
manufactured by Intel, and conventional hard drive 24, 
floppy drive(s) 26. and memory 28. Electronic vault 20, 
which is housed in a removable card, such as PCMCIA 
card 30. is a secure encryption device for postage funds 
management, digital token generation and traditional 
accounting functions. PC meter system 10 may also 
include an optional modem 29 which is located prefera- 
bly in PC 12. Modem 29 may be used for communicat- 
ing with a Postal Service or a postal authenticating 
vendor for recharging funds (debit or credit). In an alter- 
nate embodiment the modem may be located in PCM- 

card 30. 

PC meter system 10 further includes a Windows- 
based PC software module 34 (Figs. 3 and 4) that is 
accessible from conventional Windows-based word 
processing, database and spreadsheet application pro- 
grams 36. PC software module 34 includes a vault 
dynamic link library (DLL) 40. a user interface module 
42, and a plurality of sub-modules that control the 
metering functions. DLL module 40 securely communi- 
cates with vault 20 and provides an open interface to 
Microsoft Windows-based application programs 36 
through user interface module 42. DLL module 40 also 
securely stores an indicia image and a copy of the 
usage of postal funds of the vault. User interface mod- 
ule 42 provides application programs 36 access to an 
electronic indicia image from DLL module 40 for printing 
the postal revenue block on a document, such as an 
envelope or label. User interface module 42 also pro- 
vides application programs the capability to initiate 
remote refills and to perform administrative functions. 

Thus. PC-based meter system 10 operates as a 
conventional personal computer with attached printer 
that becomes a postage meter upon user request. 
Printer 18 prints all documents normally printed by a 
personal computer, including printing letters and 
addressing envelopes, and in accordance with the 
present invention, prints postage indicia. 

The vault is housed in a PCMCIA I/O device, or 
card, 30 which is accessed through a PCMCIA control- 
ler 32 in PC 12. A PCMCIA card is a credit card size 
peripheral or adapter that conforms to the standard 
specification of the Personal Computer Memory Card 
International Association. Referring now to Figs. 2 and 
3. the PCMCIA card 30 includes a microprocessor 44. 
redundant non-volatile memory (NVM) 46. clock 48. an 
encryption module 50 and an accounting module 52. 
The enayption module 50 may implement the NBS 
Data Encryption Standard (DES) or anoth©- suitable 
encryption scheme. In the preferred embodiment, 
encryption module 50 is a software module. It will be 
understood that encryption module 50 could also be a 
separator device, such as a separate chip connected to 
microprocessor 44. Accounting module 52 may be 



EEPROM that incorporate ascending and descending 
registers as well as postal data, such as origination ZIP 
Code, vendor identification, data identifying the PC- 
based postage meter 10, sequential piece count of the 

5 postal revenue block generated by the PC-based post- 
age meter 10, postage amount and the date of submis- 
sion to the Postal Service. As is known, an ascending 
register in a metering unit records the amount of post- 
age that has been dispensed, i.e. . issued by the vault. 

10 in all transactions and the descending register records 
the value, i.e., amount of postage, remaining in the 
metering unit, which value decreases as postage is 
issued. 

The hardware design of the vault includes an inter- 
15 face 56 that communicates with the host processor 22 
through PCMCIA controller 32. Preferably, for added 
physical security, the components of vault 20 thpt per- 
form the encryption and store the encrypuon keys 
(microprocessor 44, ROM 47 and NVM 48) are rack- 
20 aged in the same integrated circuit device/chip that is 
manufactured to be tanper proof Such packaging 
ensures that the contents of MVM 46 msy be read only 
by the encryption proce'isor and are not accessible out- 
side of the integrated circuit device. Alternatively, the 
25 entire card 30 could be manufactured to be tamper 
proof. 

The memory of each NVM 46 is organized into sec- 
tions. Each section contains historical data of previous 
transactions by vault 20. Examples of the types of trans- 

30 actions include: postage dispensed, tokens issued, 
refills, configuration parameters, and postal and vendor 
inspections. The size of each section d^ends on the 
number of transactions recorded and the data length of 
the type of transaction. Each section in turn is divided 

35 into transaction records. Within a section, the length of 
a transaction record is identical. The structure of a 
transaction record ts ^uch that the vault can check the 
integrity of data. 

TTie functionality of DLL 40 is a key component of 

40 PC-base meter 10. DLL 40 includes both executable 
code and data storage area 41 that is resident in hard 
drive 24 of PC 12. In a Windows environment, a vast 
majority of applications programs 36. such as word 
processing and spreadsheet programs, communicate 

45 with one another using one or more dynamic link librar- 
ies. PC-base meter 10 encapsulates all the processes 
involved in metering, and provides an open interface to 
vault 20 from all Windows-based applications capable 
of using a dynamic link library. Any application program 

so 36 can communicate with vault microprocessor 44 in 
PCMCIA card 30 through DLL 40. 

DLL 40 includes the following software sub-mod- 
ules. Secure communications sub-module 80 controls 
communications between PC 12 and vault 20. Transac- 

55 tion captures sub-module 82 stores transaction records 
in PC 12. Secure indicia image creation and storage 
sub-module 84 generates an indicia bit map image and 
stores the image for subsequent printing. Application 
interface sub-module 86 interfaces with non-metering 
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application programs and issues requests ior digital 
tokens in response to requests for indioa by the non- 
metering application programs. A more detailed 
description of PC meter system 10 is provided in related 
European Patent Application Serial No. [Attorney 5 
Docket E-421] filed concurrently herewith and incorpo- 
rated herein in its entirety by reference. 

Since printer 18 is not dedicated to the metering 
function, issued digital tokens may be requested, calcu- 
lated and stored in PC 12 for use at a later time when, to 
at a user's discretion, corresponding indicia are gener- 
ated and printed. Such delayed printing and batch 
processing is described in more detail in co-pending 
European Patent Application Serial No. [Attorney 
Docket E-452], which is incorporated herein in its 75 
entirety by reference. 

Digital Token Generation Process 

In accordance with the present invention, then a 20 
request for digital token is received from PC 12, vault 20 
calculates and issues at least one dicfital token to PC 12 
in response to the request. The issued digital token is 
stored as part of a transaction record in PC 12 for print- 
ing at a later time. In the preferred embodiment of the 25 
present invention, the transaction record is stored in a 
hidden file in DLL storage area 41 on hard drive 24. 
Each transaction record is indexed in the hidden file 
according to addressee information. It has been discov- 
ered that this method of issuing and storing digital so 
tokens provides an additional benefit that one or more 
digital tokens can be reissued whenever a token has not 
been printed or if a problem has occunred preventing a 
printing of an indicia with the token. 

By storing digital tokens as part of transaction 35 
records in PC 12 the digital tokens can be accessed at 
a later time for the generation and printing of indicia 
which is done in PC 12. Furthermore, if a digital token is 
lost, i.e.. not properly printed on a mailpiece, the digital 
token can be reissued from DLL 40 rather than from 40 
vault 20. The storage of transaction records that include 
vault status at the end of each transaction provides a 
backup to the vault with regard to accounting informa- 
tion as well as a record of issued tokens. The number of 
transaction records stored on hard drive 24 may be lim- 45 
ited to a predetermined number, preferably including all 
transactions since the last refill of vault 20. 

Referring now to Fig. 5, when power is applied, at 
step 200, to vault 20, i.e. when card 30 is inserted into 
controller 32. the vault initializes itself. At step 202, vault so 
20 checks the integrity of the funds stored in the redun- 
dant NVM 46. If bad, vault 20 sets itself Into a disabled 
state, at step 204. If the NVM data is correct, then, at 
step 206. the registers related to postal funds. i.e.. the 
ascending, descending and piece count registers, are 55 
loaded to RAM 45 and the most recent transaction 
record is also loaded into RAM 45. After verifying the 
data integrity of NVM 46 and copying the most recent 
records into vault's RAM 45. vault 20 is initialized and 



thereafter waits for an external command, at step 208. 

When a status command is received, at step 210. 
vault 20 replies to PC 12 with its current status, at step 
212. If a password is required to access vault 20 func- 
tions, at step 216 an entered password is checked for 
correctness. 

When a command to set the date is received, at 
step 218. for the first time in a particular month, the 
vault, at step 220, sets the date and derives token gen- 
eration keys for the month from master keys stored in 
NVM 46 of the vault. The vault then enables itself and is 
ready to receive a token request command. Once the 
date is set, when another date set command is received 
in the same month, the vault simply acknowledges the 
command and sets the date without re-calculating the 
token generation keys. At step 224, a postage com- 
mand is received and a postage value, for example, 
$.32. is set at step 226. 

When a token request command comprising a des- 
tination postal code is received by vault 20. at step 228, 
it checks the format of and the range of values in the 
request at steps 234-240. If the request is improper, 
vault 20 rejects the request and sends a status mes- 
sage to user application program 36 via DLL 40 at step 
212. Vault 20 checks the date in the request, at step 
234, and then conpares, at step 236, the requested 
postage amount with the two warning values: high value 
warning and the postage limit amount. If the request 
exceeds the warning values, the request is rejected. 
Vault 20 then compares, at step 238. the requested 
postage amount with available postal funds in the 
descending register. If the amount of available postal 
funds is smaller than the requested amount, the vault 
rejects the token request command and sends an 
appropriate message to user application program 36 via 
DLL 40. If the amount of available postal funds is 
greater than or equal to the requested amount, vault 20 
checks the destination infonnation at step 240. 

Finally, at step 242 vault 20 begins the accounting 
process to issue a digital token. Vault 20 deducts the 
requested postage amount from the available postal 
funds, i.e., adds the amount to the ascending register 
and subtracts the amount from the descending register, 
in RAM. At step 244 a digital token is calculated using 
an open system algorithm which includes addressee 
infbmiation. At step 246. vault 20 constructs in RAM 45 
a transaction record that includes the piece count and 
the calculated token and stores the transaction record in 
an indexed file in the redundant NVM 46. In the pre- 
fen-ed ennbodiment, the NVM transaction file is indexed 
by piece count. After storing to fslVM, vault 20 checks, at 
step 248. the integrity of NVM 46 to confirm that the 
data is stored correctly. If an error occurs during this 
process, tokens are not issued and an error message is 
reported to the host processor in PC 12. If no en-or 
occurs, a transmission buffer that consists of the trans- 
action record is assembled and vault 20 transmits, at 
step 250, the transaction record to DLL 40 in PC 12. If 
vault 20 does not receive a positive acknowledgment 
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from PC 12, vault 20 retransmits the message. 

Conventional postage meters store transactions in 
the meter. In accordance with the present invention, 
Transaction Capture sub-module 82 captures each 
transaction record received from vault 20 and records s 
the transaction record in DLL 40 and in DLL storage 
area 41 on hard drive 24 for a historical record. If there 
is ample room on hard drive 24, such transaction cap- 
tures can be stored for a plurality of different vaults. 
Referring now to Fig. 6, from the moment that a commu- io 
nication session is established. Transaction Capture 
sub-module 82 monitors message traffic at step 120, 
selectively captures each transaction record for token 
generations and refills, and stores such transaction 
records in DLL 40 at step 124 in an invisible and write- is 
protected file 83 in DLL storage area 41 at step 126. 
The information stored for each transaction record 
includes, for exanple, vault serial number, date, piece 
count postage, postal funds available (descending reg- 
ister), tokens, destination postal code and a block check so 
character. A predetermined number of the most recent 
records initiated by PC 12 are stored in file 83 which is 
an historical file indexed according to piece count. File 

83 represents the minor image of vault 20 at the time of 
the transaction except for the encryption keys and con- ss 
figuration parameters. Storing transaction records on 
hard drive 24 provides backup capability which is 
desaibed below. In accordance with the present inven- 
tion transaction records are maintained for a plurality of 
issued digital tokens for a predetermined time or count, so 

In accordance with the present invention, the entire 
fixed graphics image 90 of the indida 92, shown in Fig. 
8 is stored as compressed data 94 in DLL storage area 
41. Postal data information, including piece count 93a. 
vendor ID 93b, postage amount 93c, serial number 93d. ss 
date 93e and origination ZIP 93f and tokens 93g are 
combined with the feed graphics image 90 by Indicia 
image Creation Module 84. 

Referring now to Fig. 7, when a request for indicia is 
made from an application program in PC 1 2 at step 1 42. 40 
Indicia Image Creation Module 84 checks for a digital 
token from vault 20 at step 144, and at step 146 gener- 
ates a bit-mapped indicia image 96 by expanding the 
compressed feed graphics image data 94 at step 148 
and combining at step 150 the indicia's feed graphics 45 
image 90 with some or all of the postal data information 
and tokens received from vault 20. At step 1 52. the indi- 
cia image is stored In DLL 40 for printing. Sub-module 

84 sends to the requesting application program 36 in 

PC 12 the created bit-mapped indicia image 96 that is so 
ready for printing, and then stores a transaction record 
comprising the digital tokens and associated postal data 
in DLL storage area 41. At this time, the indicia can be 
printed imn>ediately or at a later time. 

Thus, the bit-mapped indicia image 95 is stored in ss 
DLL 40 which can only be accessed by executable code 
in DLL 40. Furthermore, only tfie executable code of 
DLL 40 can access the fixed graphics image 90 of the 
indicia to generated bit-mapped indicia image 96. This 



prevents accidental modification of the indicia because 
it would be very difficult for a normal user to access, 
intentionally or othenA^ise, the fixed graphics image 90 of 
the indicia and the bit-mapped indicia image 96. 

The present invention is suitable for generating a 
batch of tokens for addresses in a mailing list rather 
than entering such list of addressees one at a time. The 
batch of tokens are part of a batch of transaction 
records, that are indexed in the transaction file in tiie 
DLL storage area 41, which are later used to generate 
indicia images when printing envelopes for tiie mailing 
list. Such batch processing would be useful, for exam- 
ple, to production mailers which often have databases 
of addresses from which to generate mail. These data- 
bases are usually pre-processed and sorted to take 
advantage of postal discounts and recipient profiles for 
direct marketing opportunities. 

In an alternate embodiment, a PC-based open 
metering system is part of a network with the vault con- 
nected to a server PC and the user requesting postugo 
from a user PC. The token generation proces., would 
proceed as previously described except th?t the vau!i 
functions, including token generation, would occur in the 
server PC or the vault card connecttKi thereto. The 
server PC also stores a record of all transactions for 
backup and disaster recovery purposes. The user PC 
would store the transaction records, including issued 
tokens, on its hard drive and vrauld generate indicia cor- 
responding thereto. This configuration would allow mul- 
tiple users to send a letter to the same addressee 
without the token generation being inhibited. 

While the present invention has been disclosed and 
described with reference to a single embodiment 
thereof, it will be apparent, as noted above that varia- 
tions and modifications may be made therein. It is, thus, 
interxled in the following claims to cover each variation 
and modification that falls within the true spirit and 
scope of the present invention. 

In the foregoing, the following attomey docket refer- 
ences indicate the US-applications shown in the follow- 
ing table. All these applications have corresponding 
European Applications and are hereby incorporated 
herein by reference: 

E-41 5 Serial No. 08/575. 1 06 

E-416 Serial No, 08/575. 1 07 

E-417 Serial No. 08/574,746 

E-418 Serial No. 08/574.745 

E-41 9 Serial No. 08/575,1 10 

E-420 Serial No. 08/574,743 

E-421 Serial No. 08/575, 1 1 2 

E-444 Serial No. 08/575. 1 09 

E-452 Serial No. 08/575.1 04 

E-463 Serial No. 08/574.749 

E-466 Serial No. 08/575. 1 1 1 

E-462 Serial No. 08/588.499 
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Claims 

1 . A method of issuing digital tokens in a open system 
meter comprising the steps of: 

5 

sending a request for digital tokens and prede- 
termined postal information, including 
addressee information, from a host processor 
to a vault that is operatively coupled to the host 
processor; io 
calculating in the vault in response to the 
request for tokens at least one digital token 
using the predetermined postal information; 
debiting postal funds in the vault; 
issuing the digital token to the host processor; is 
and 

storing the digital token and the predetermined 
postal information as a transaction record in 
the host processor for subsequent generation 
/y. and printing of an indicia. 20 

2. The method of claim 1 comprising the further steps 
of: 

generating in the host processor an indicia 25 
comprising a graphical image of the digital 
token and the predetermined postal informa- 
tion and storing the indicia in the host proces- 
sor; 

printing the indicia on a mailpiece when 30 
requested. 

3. The method of claim 1 wherein the step of storing 
the digital token and the predetermined postal infor- 
mation as a transaction record in the host proces- 35 
sor includes indexing the transaction record 
corresponding to piece count. 

4. The method of claim 1 comprising the further step 

of reissuing the digital token from the hard drive if 40 
the indicia has not been printed. 

5. The method of claim 1 comprising the further step 
of: 



45 



50 



repeating the steps in claim 1 for a batch of 
addressees before printing an indicia for each 
digital token coaesponding to each of the 
addressees. 

6. The method of claim 1 comprising the further step 
of: 



maintaining a plurality of issued digital tokens 
for a predetermined time or count 55 

7. The method of claim 1 comprising the further step 
of: 



repeating the steps in claim 1 to obtain a batch 
of digital tokens stored on the hard drive for 
subsequent batch generation of indicia. 

8. A method of issuing digital tokens in a open system 
meter comprising the steps of: 

sending a request for digital tokens and prede- 
termined postal information, including 
addressee information, from a host processor 
to a vault that is operatively coupled to the host 
processor; 

calculating in the vault in response to the 
request for tokens at least one digital token 
using the predetermined postal information; 
debiting postal funds in the vault; 
sending the digital token to the host processor: 
generating in the host processor a graphical 
image of the digital token and the predeter- 
mined postal information: and 
storing the graphical image of an indicia com- 
prising the digital token and the predetermined 
postal information for subsequent printing of 
the indicia; and 

storing in the server PC a record of each trans- 
action as backup for disaster recovery. 

9. A metiiod of issuing digital tokens in a PC meter on 
a network, conrprising the steps of: 

sending a request for digital tokens and prede- 
termined postal information, including 
addressee information, from a local PC to a 
vault operatively connected to a network 
server; 

generating in the vault in response to the 
request for tokens at least one digital token 
using the predetermined postal information; 
storing the digital token in NVM in the vault; 
sending the digital token to the local PC; 
storing the digital token and the predetermined 
postal information in a transaction record tile in 
the local PC for subsequent generation and 
printing of an indicia. 

10. A method of issuing a batch of digital tokens, the 
method conprising the steps of: 

providing a mailing list file in a PC; 
extracting required postal information for each 
desired address in a mailing list 
sending a request for digital tokens and the 
required postal information, including 
addressee information, for desired ones of the 
addresses in the mailing list from the PC to a 
vault that is operatively coupled to the PC; 
calculating in response to each request for dig- 
ital tokens at least one digital token in the vault 
using the predetermined postal information; 
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storing each digital token in vault NVM in the 
vault; 

debiting postal funds in the vault NVM corre- 
sponding to the digital tokens calculated for 
each address; 5 
sending each digital token to the processor; 
and 

storing each digital token in an issued token file 
on the hard drive of the PC in a manner con- 
sistent with the order that each corresponding 10 
address is in the mailing list for subsequent 
generation and printing of an indicia. 

The Tnethod of daim 10 compr i sing the turlher 
steps of: 75 

generating an indicia bitmap comprising the 
digital token for one of the digital tokens in the 
issued token file; 

formatting an envelope print routine including 20 
the indicia bitmap in response to a print com- 
mand; 

printing an envelope in accordance with the for- 
matted envelope print routine; 
storing the indicia bitmap in a bitmap file on the 25 
hard drive for subsequent printing: and 
repeating the previous steps until indicia are 
printed for all desired addressees in the mailing 
list. 
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